600.436 High-Assurance
Systems
Fall 01/System Security Realization
54
Semiformal Correspondence
¨For each adjacent pair of provided TSF representations, where portions of both representations are at least semiformally specified, the demonstration of correspondence between those portions of the representations shall be semiformal.